Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2025/11/24 11:30 p.m.•5 views

Malware in @trackstar/react-trackstar-link-upgrade

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 11:30 p.m.•17 views

Malicious code in @trackstar/react-trackstar-link-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461a58528df6fa02843e6ddff3edefa762e12d5f5beaa15f3098238118347d6e The package @trackstar/react-trackstar-link-upgrade was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/11/24 11:30 p.m.•10 views

EUVD-2025-199283

Malicious code in @trackstar/react-trackstar-link-upgrade npm...

6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-52181

Malicious code in bioql PyPI...

6.5CVSS5.9AI score0.00485EPSS
SaveExploits0References5
NVD
NVD
•added 2020/01/08 10:15 p.m.•26 views

CVE-2019-17002

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox 70...

4.3CVSS4.8AI score0.00731EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2019/10/23 12:00 a.m.•32 views

CVE-2019-17002

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox 70...

4.3CVSS6.8AI score0.00731EPSS
SaveExploits1References3
Rows per page
Query Builder